Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6d34b25d-6b8d-3f7e-94cf-90c7dbf47f2e.roa
File:                     6d34b25d-6b8d-3f7e-94cf-90c7dbf47f2e.roa (raw, json)
Hash identifier:          w4zI82Ue8hKcJqCkPuyTMO5NWm60QEXBMyJBnkl9xT4=
Subject key identifier:   1D:AC:35:49:2C:D8:C6:2F:1C:36:0B:94:FB:3E:F9:80:C8:F4:28:C4
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584D59EAA5EF128EE68D3064C300
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6d34b25d-6b8d-3f7e-94cf-90c7dbf47f2e.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     398885
IP address blocks:        65.49.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:a5:ef:12:8e:e6:8d:30:64:c3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=bf8cc911-0d52-42ec-b84a-30c631d74b99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:49:f4:eb:86:03:8b:07:d4:e6:9a:2a:e4:37:
                    8a:3e:e8:de:a2:04:61:15:56:8a:d9:71:a7:c5:b3:
                    d2:c3:2b:33:20:f3:68:86:69:d0:b5:b5:80:dc:56:
                    01:ae:7a:38:e0:ac:af:0e:10:01:ae:45:6a:17:41:
                    96:72:f8:9c:7d:53:19:b3:7d:ea:7b:3e:b6:10:4e:
                    e5:29:0d:cb:bb:7a:0a:d2:f0:0c:b7:63:d0:c8:c5:
                    86:93:3d:df:9f:46:9d:9c:d4:8e:f6:42:1c:73:d0:
                    5c:b1:21:35:a4:c6:56:fc:cf:ab:4d:10:e5:34:42:
                    4b:24:76:e9:c0:c4:7d:63:26:b0:24:53:e3:75:65:
                    6a:b3:78:0f:7c:b7:9d:a7:5a:83:7d:10:f3:d4:27:
                    a4:4e:81:2d:39:cc:80:13:aa:b3:9e:8e:97:f9:8f:
                    3f:1a:30:2d:4f:3a:f0:94:36:d5:c2:34:2c:6f:72:
                    87:9d:4a:6e:4e:cf:b2:96:50:21:8b:5f:ea:71:0c:
                    a6:1e:5b:d5:69:f6:3d:bd:d6:53:db:9a:84:f1:9e:
                    57:59:20:78:63:bd:43:5f:eb:e2:99:24:17:48:98:
                    95:df:d4:f3:6e:ed:a7:f9:18:01:a3:b0:7c:9f:29:
                    a3:65:1c:82:66:9b:3a:b7:c9:be:90:66:a3:d4:24:
                    10:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:AC:35:49:2C:D8:C6:2F:1C:36:0B:94:FB:3E:F9:80:C8:F4:28:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6d34b25d-6b8d-3f7e-94cf-90c7dbf47f2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.49.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:b5:4e:4f:6b:75:ee:90:fc:14:ab:e2:97:ee:99:49:b6:dd:
         d4:16:7a:81:6e:70:60:db:6b:61:00:5c:01:e3:26:be:35:f0:
         86:d2:6a:1a:85:49:9b:23:41:08:c6:94:16:06:4a:1f:b9:d2:
         06:de:1d:1b:ef:5d:6b:da:5b:38:8b:15:71:0d:30:9d:c4:f1:
         bf:eb:b0:56:21:76:63:68:29:8b:e6:fb:fc:35:34:83:87:77:
         43:ce:62:37:ed:d9:fe:e3:aa:93:6e:8d:59:4a:1f:84:81:17:
         b2:a1:3c:ef:4c:65:13:02:36:6f:b4:02:31:7f:70:1f:9a:34:
         c4:a2:c2:36:91:7e:c9:0a:e6:34:85:92:c2:13:f8:1f:09:a5:
         83:92:43:6d:38:4a:a0:d8:19:1b:12:30:43:42:e5:56:c5:44:
         fa:75:ab:75:2a:51:9a:28:4b:fc:8f:93:ec:55:6e:c5:af:de:
         ad:9e:56:0f:d2:49:b7:0c:45:15:ec:a7:3e:d8:df:9c:e9:78:
         0b:1f:fc:e6:1b:dc:18:d5:06:6c:5e:26:47:c6:8d:b0:72:ab:
         d2:5e:8b:fc:ac:64:75:2e:73:cf:23:ea:f7:07:3d:10:a4:09:
         7b:e8:36:91:27:80:87:71:a5:57:23:58:bc:1a:66:bd:8a:15:
         d4:57:75:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:15:00 2026 by rpki-client